@openpolicy/vite-auto-collect 0.0.18 → 0.0.19

package/dist/index.d.ts

@@ -17,6 +17,9 @@ type AutoCollectOptions = {
    * `.svelte-kit`, `.cache`).
    */
   ignore?: string[];
+  thirdParties?: {
+    usePackageJson?: boolean;
+  };
 };
 /**
  * Vite plugin that scans source files for `@openpolicy/sdk` `collecting()`

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";;;KAMY,kBAAA;;AAAZ;;;EAKC,MAAA;EAAA;;;EAIA,UAAA;EAMM;AAwCP;;;;EAxCC,MAAA;AAAA;;;;;;;;;;;;;iBAwCe,WAAA,CAAY,OAAA,GAAS,kBAAA,GAA0B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";;;KAOY,kBAAA;;AAAZ;;;EAKC,MAAA;EAAA;;;EAIA,UAAA;EASC;;;AAyCF;;EA5CC,MAAA;EAEA,YAAA;IACC,cAAA;EAAA;AAAA;;;;;;;;;;;;;iBAyCc,WAAA,CAAY,OAAA,GAAS,kBAAA,GAA0B,MAAA"}

package/dist/index.js

@@ -4,65 +4,93 @@ import { parseSync } from "oxc-parser";
 //#region src/analyse.ts
 const SDK_SPECIFIER = "@openpolicy/sdk";
 const COLLECTING_NAME = "collecting";
+const THIRD_PARTY_NAME = "thirdParty";
 /**
-* Extract `collecting()` call metadata from a single source file.
+* Extract `collecting()` and `thirdParty()` call metadata from a single source file.
 *
-* Returns a `Record<category, labels[]>` for every detected call whose
-* arguments match the analysable shape. Files with no matching calls — or
-* that fail to parse — return `{}`.
+* Returns an `ExtractResult` with `dataCollected` (category → labels) and
+* `thirdParties` (array of third-party entries). Files with no matching calls
+* — or that fail to parse — return empty defaults.
 *
 * The analyser runs in two phases:
-* 1. Collect local names bound to `collecting` imported from `@openpolicy/sdk`
-*    (handles renamed imports, skips type-only imports, ignores look-alikes
-*    imported from other modules).
+* 1. Collect local names bound to `collecting` / `thirdParty` imported from
+*    `@openpolicy/sdk` (handles renamed imports, skips type-only imports,
+*    ignores look-alikes imported from other modules).
 * 2. Walk the program body and inspect every `CallExpression` whose callee
 *    is one of those tracked local names.
 */
-function extractCollecting(filename, code) {
+function extractFromFile(filename, code) {
+	const empty = {
+		dataCollected: {},
+		thirdParties: []
+	};
 	let result;
 	try {
 		result = parseSync(filename, code);
 	} catch {
 		console.warn(`[openpolicy-auto-collect] parse error in ${filename}`);
-		return {};
+		return empty;
 	}
 	if (result.errors.length > 0) {
 		if (result.errors.some((e) => e.severity === "Error")) {
 			console.warn(`[openpolicy-auto-collect] parse error in ${filename}`);
-			return {};
+			return empty;
 		}
 	}
 	const program = result.program;
-	const localNames = collectSdkCollectingBindings(program);
-	if (localNames.size === 0) return {};
-	const out = {};
+	const collectingNames = collectSdkBindings(program, COLLECTING_NAME);
+	const thirdPartyNames = collectSdkBindings(program, THIRD_PARTY_NAME);
+	if (collectingNames.size === 0 && thirdPartyNames.size === 0) return empty;
+	const dataCollected = {};
+	const thirdParties = [];
+	const seenThirdParties = /* @__PURE__ */ new Set();
 	walk(program, (node) => {
 		if (node.type !== "CallExpression") return;
 		const callee = node.callee;
 		if (!callee || callee.type !== "Identifier") return;
-		if (!localNames.has(callee.name)) return;
+		const calleeName = callee.name;
 		const args = node.arguments;
-		if (!args || args.length < 3) return;
-		const category = extractStringLiteral(args[0]);
-		if (category === null) return;
-		const labels = extractLabelKeys(args[2]);
-		if (labels === null) return;
-		const existing = out[category] ?? [];
-		const seen = new Set(existing);
-		for (const label of labels) if (!seen.has(label)) {
-			existing.push(label);
-			seen.add(label);
+		if (collectingNames.has(calleeName)) {
+			if (!args || args.length < 3) return;
+			const category = extractStringLiteral(args[0]);
+			if (category === null) return;
+			const labels = extractLabelKeys(args[2]);
+			if (labels === null) return;
+			const existing = dataCollected[category] ?? [];
+			const seen = new Set(existing);
+			for (const label of labels) if (!seen.has(label)) {
+				existing.push(label);
+				seen.add(label);
+			}
+			dataCollected[category] = existing;
+		} else if (thirdPartyNames.has(calleeName)) {
+			if (!args || args.length < 3) return;
+			const name = extractStringLiteral(args[0]);
+			if (name === null) return;
+			const purpose = extractStringLiteral(args[1]);
+			if (purpose === null) return;
+			const policyUrl = extractStringLiteral(args[2]);
+			if (policyUrl === null) return;
+			if (seenThirdParties.has(name)) return;
+			seenThirdParties.add(name);
+			thirdParties.push({
+				name,
+				purpose,
+				policyUrl
+			});
 		}
-		out[category] = existing;
 	});
-	return out;
+	return {
+		dataCollected,
+		thirdParties
+	};
 }
 /**
-* Walk `ImportDeclaration` nodes and return the local names bound to
-* `collecting` imported from `@openpolicy/sdk`. Skips type-only imports and
-* specifiers whose imported name isn't literally `collecting`.
+* Walk `ImportDeclaration` nodes and return the local names bound to the given
+* `exportName` imported from `@openpolicy/sdk`. Skips type-only imports and
+* specifiers whose imported name doesn't match.
 */
-function collectSdkCollectingBindings(program) {
+function collectSdkBindings(program, exportName) {
 	const names = /* @__PURE__ */ new Set();
 	const body = program.body;
 	if (!body) return names;
@@ -78,7 +106,7 @@ function collectSdkCollectingBindings(program) {
 			if (spec.importKind === "type") continue;
 			const imported = spec.imported;
 			if (!imported) continue;
-			if ((imported.type === "Identifier" ? imported.name : imported.type === "Literal" ? typeof imported.value === "string" ? imported.value : void 0 : void 0) !== COLLECTING_NAME) continue;
+			if ((imported.type === "Identifier" ? imported.name : imported.type === "Literal" ? typeof imported.value === "string" ? imported.value : void 0 : void 0) !== exportName) continue;
 			const local = spec.local;
 			if (!local || local.type !== "Identifier") continue;
 			names.add(local.name);
@@ -132,6 +160,140 @@ function walk(node, visit) {
 	}
 }
 //#endregion
+//#region src/known-packages.ts
+/**
+* Registry of known npm packages mapped to their ThirdPartyEntry metadata.
+* Multiple package names can point to the same service — deduplication by
+* `ThirdPartyEntry.name` is handled at merge time in the caller.
+*/
+const KNOWN_PACKAGES = new Map([
+	["stripe", {
+		name: "Stripe",
+		purpose: "Payment processing",
+		policyUrl: "https://stripe.com/privacy"
+	}],
+	["@stripe/stripe-js", {
+		name: "Stripe",
+		purpose: "Payment processing",
+		policyUrl: "https://stripe.com/privacy"
+	}],
+	["braintree", {
+		name: "Braintree",
+		purpose: "Payment processing",
+		policyUrl: "https://www.braintreepayments.com/legal/braintree-privacy-policy"
+	}],
+	["@braintree/browser-drop-in", {
+		name: "Braintree",
+		purpose: "Payment processing",
+		policyUrl: "https://www.braintreepayments.com/legal/braintree-privacy-policy"
+	}],
+	["@sentry/browser", {
+		name: "Sentry",
+		purpose: "Error tracking",
+		policyUrl: "https://sentry.io/privacy/"
+	}],
+	["@sentry/node", {
+		name: "Sentry",
+		purpose: "Error tracking",
+		policyUrl: "https://sentry.io/privacy/"
+	}],
+	["@sentry/nextjs", {
+		name: "Sentry",
+		purpose: "Error tracking",
+		policyUrl: "https://sentry.io/privacy/"
+	}],
+	["@sentry/react", {
+		name: "Sentry",
+		purpose: "Error tracking",
+		policyUrl: "https://sentry.io/privacy/"
+	}],
+	["@sentry/vue", {
+		name: "Sentry",
+		purpose: "Error tracking",
+		policyUrl: "https://sentry.io/privacy/"
+	}],
+	["@datadog/browser-rum", {
+		name: "Datadog",
+		purpose: "Monitoring",
+		policyUrl: "https://www.datadoghq.com/legal/privacy/"
+	}],
+	["dd-trace", {
+		name: "Datadog",
+		purpose: "Monitoring",
+		policyUrl: "https://www.datadoghq.com/legal/privacy/"
+	}],
+	["posthog-js", {
+		name: "PostHog",
+		purpose: "Product analytics",
+		policyUrl: "https://posthog.com/privacy"
+	}],
+	["posthog-node", {
+		name: "PostHog",
+		purpose: "Product analytics",
+		policyUrl: "https://posthog.com/privacy"
+	}],
+	["mixpanel-browser", {
+		name: "Mixpanel",
+		purpose: "Product analytics",
+		policyUrl: "https://mixpanel.com/legal/privacy-policy/"
+	}],
+	["@segment/analytics-next", {
+		name: "Segment",
+		purpose: "Customer data platform",
+		policyUrl: "https://www.twilio.com/en-us/legal/privacy"
+	}],
+	["@amplitude/analytics-browser", {
+		name: "Amplitude",
+		purpose: "Product analytics",
+		policyUrl: "https://amplitude.com/privacy"
+	}],
+	["amplitude-js", {
+		name: "Amplitude",
+		purpose: "Product analytics",
+		policyUrl: "https://amplitude.com/privacy"
+	}],
+	["@vercel/analytics", {
+		name: "Vercel Analytics",
+		purpose: "Web analytics",
+		policyUrl: "https://vercel.com/legal/privacy-policy"
+	}],
+	["plausible-tracker", {
+		name: "Plausible",
+		purpose: "Web analytics",
+		policyUrl: "https://plausible.io/privacy"
+	}],
+	["logrocket", {
+		name: "LogRocket",
+		purpose: "Session recording",
+		policyUrl: "https://logrocket.com/privacy/"
+	}],
+	["@hotjar/browser", {
+		name: "Hotjar",
+		purpose: "Session recording",
+		policyUrl: "https://www.hotjar.com/legal/policies/privacy/"
+	}],
+	["resend", {
+		name: "Resend",
+		purpose: "Transactional email",
+		policyUrl: "https://resend.com/legal/privacy-policy"
+	}],
+	["@sendgrid/mail", {
+		name: "SendGrid",
+		purpose: "Transactional email",
+		policyUrl: "https://www.twilio.com/en-us/legal/privacy"
+	}],
+	["intercom-client", {
+		name: "Intercom",
+		purpose: "Customer messaging",
+		policyUrl: "https://www.intercom.com/legal/privacy"
+	}],
+	["@intercom/messenger-js-sdk", {
+		name: "Intercom",
+		purpose: "Customer messaging",
+		policyUrl: "https://www.intercom.com/legal/privacy"
+	}]
+]);
+//#endregion
 //#region src/scan.ts
 const DEFAULT_IGNORES = new Set([
 	"node_modules",
@@ -215,11 +377,46 @@ function autoCollect(options = {}) {
 	const srcDirOpt = options.srcDir ?? "src";
 	const extensions = options.extensions ?? [".ts", ".tsx"];
 	const ignore = options.ignore ?? [];
+	const usePackageJsonOpt = options.thirdParties?.usePackageJson ?? false;
+	let resolvedRoot;
 	let resolvedSrcDir;
-	let scanned = {};
+	let scanned = {
+		dataCollected: {},
+		thirdParties: []
+	};
+	async function detectFromPackageJson(root) {
+		let raw;
+		try {
+			raw = await readFile(resolve(root, "package.json"), "utf8");
+		} catch {
+			return [];
+		}
+		let pkg;
+		try {
+			pkg = JSON.parse(raw);
+		} catch {
+			return [];
+		}
+		const allDeps = {
+			...pkg.dependencies,
+			...pkg.devDependencies
+		};
+		const entries = [];
+		const seenNames = /* @__PURE__ */ new Set();
+		for (const pkgName of Object.keys(allDeps)) {
+			const entry = KNOWN_PACKAGES.get(pkgName);
+			if (entry && !seenNames.has(entry.name)) {
+				seenNames.add(entry.name);
+				entries.push(entry);
+			}
+		}
+		return entries;
+	}
 	async function scanAndMerge() {
 		const files = await walkSources(resolvedSrcDir, extensions, ignore);
-		const merged = {};
+		const mergedData = {};
+		const mergedParties = [];
+		const seenParties = /* @__PURE__ */ new Set();
 		for (const file of files) {
 			let code;
 			try {
@@ -227,18 +424,32 @@ function autoCollect(options = {}) {
 			} catch {
 				continue;
 			}
-			const extracted = extractCollecting(file, code);
-			for (const [category, labels] of Object.entries(extracted)) {
-				const existing = merged[category] ?? [];
+			const extracted = extractFromFile(file, code);
+			for (const [category, labels] of Object.entries(extracted.dataCollected)) {
+				const existing = mergedData[category] ?? [];
 				const seen = new Set(existing);
 				for (const label of labels) if (!seen.has(label)) {
 					existing.push(label);
 					seen.add(label);
 				}
-				merged[category] = existing;
+				mergedData[category] = existing;
+			}
+			for (const entry of extracted.thirdParties) if (!seenParties.has(entry.name)) {
+				seenParties.add(entry.name);
+				mergedParties.push(entry);
+			}
+		}
+		if (usePackageJsonOpt) {
+			const pkgEntries = await detectFromPackageJson(resolvedRoot);
+			for (const entry of pkgEntries) if (!seenParties.has(entry.name)) {
+				seenParties.add(entry.name);
+				mergedParties.push(entry);
 			}
 		}
-		return merged;
+		return {
+			dataCollected: mergedData,
+			thirdParties: mergedParties
+		};
 	}
 	/**
 	* Returns true when `file` lives inside `resolvedSrcDir` and has one of
@@ -269,6 +480,7 @@ function autoCollect(options = {}) {
 		name: "openpolicy-auto-collect",
 		enforce: "pre",
 		configResolved(config) {
+			resolvedRoot = config.root;
 			resolvedSrcDir = resolve(config.root, srcDirOpt);
 		},
 		async buildStart() {
@@ -300,7 +512,7 @@ function autoCollect(options = {}) {
 		},
 		load(id) {
 			if (id !== RESOLVED_VIRTUAL_ID) return null;
-			return `export const dataCollected = ${JSON.stringify(scanned)};\n`;
+			return `export const dataCollected = ${JSON.stringify(scanned.dataCollected)};\nexport const thirdParties = ${JSON.stringify(scanned.thirdParties)};\n`;
 		}
 	};
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/analyse.ts","../src/scan.ts","../src/index.ts"],"sourcesContent":["import { parseSync } from \"oxc-parser\";\n\nconst SDK_SPECIFIER = \"@openpolicy/sdk\";\nconst COLLECTING_NAME = \"collecting\";\n\ntype AnyNode = { type: string; [key: string]: unknown };\n\n/**\n * Extract `collecting()` call metadata from a single source file.\n *\n * Returns a `Record<category, labels[]>` for every detected call whose\n * arguments match the analysable shape. Files with no matching calls — or\n * that fail to parse — return `{}`.\n *\n * The analyser runs in two phases:\n * 1. Collect local names bound to `collecting` imported from `@openpolicy/sdk`\n *    (handles renamed imports, skips type-only imports, ignores look-alikes\n *    imported from other modules).\n * 2. Walk the program body and inspect every `CallExpression` whose callee\n *    is one of those tracked local names.\n */\nexport function extractCollecting(\n\tfilename: string,\n\tcode: string,\n): Record<string, string[]> {\n\tlet result: ReturnType<typeof parseSync>;\n\ttry {\n\t\tresult = parseSync(filename, code);\n\t} catch {\n\t\tconsole.warn(`[openpolicy-auto-collect] parse error in ${filename}`);\n\t\treturn {};\n\t}\n\n\tif (result.errors.length > 0) {\n\t\t// Hard parse failures only — oxc reports recoverable errors but still\n\t\t// produces a usable AST, so we keep going and let the walker decide.\n\t\tconst fatal = result.errors.some((e) => e.severity === (\"Error\" as never));\n\t\tif (fatal) {\n\t\t\tconsole.warn(`[openpolicy-auto-collect] parse error in ${filename}`);\n\t\t\treturn {};\n\t\t}\n\t}\n\n\tconst program = result.program as unknown as AnyNode;\n\tconst localNames = collectSdkCollectingBindings(program);\n\tif (localNames.size === 0) return {};\n\n\tconst out: Record<string, string[]> = {};\n\twalk(program, (node) => {\n\t\tif (node.type !== \"CallExpression\") return;\n\t\tconst callee = node.callee as AnyNode | undefined;\n\t\tif (!callee || callee.type !== \"Identifier\") return;\n\t\tif (!localNames.has(callee.name as string)) return;\n\n\t\tconst args = node.arguments as AnyNode[] | undefined;\n\t\tif (!args || args.length < 3) return;\n\n\t\tconst category = extractStringLiteral(args[0]);\n\t\tif (category === null) return;\n\n\t\tconst labels = extractLabelKeys(args[2]);\n\t\tif (labels === null) return;\n\n\t\tconst existing = out[category] ?? [];\n\t\tconst seen = new Set(existing);\n\t\tfor (const label of labels) {\n\t\t\tif (!seen.has(label)) {\n\t\t\t\texisting.push(label);\n\t\t\t\tseen.add(label);\n\t\t\t}\n\t\t}\n\t\tout[category] = existing;\n\t});\n\treturn out;\n}\n\n/**\n * Walk `ImportDeclaration` nodes and return the local names bound to\n * `collecting` imported from `@openpolicy/sdk`. Skips type-only imports and\n * specifiers whose imported name isn't literally `collecting`.\n */\nfunction collectSdkCollectingBindings(program: AnyNode): Set<string> {\n\tconst names = new Set<string>();\n\tconst body = program.body as AnyNode[] | undefined;\n\tif (!body) return names;\n\tfor (const node of body) {\n\t\tif (node.type !== \"ImportDeclaration\") continue;\n\t\tif ((node.importKind as string | undefined) === \"type\") continue;\n\t\tconst source = node.source as AnyNode | undefined;\n\t\tif (!source || source.value !== SDK_SPECIFIER) continue;\n\t\tconst specifiers = node.specifiers as AnyNode[] | undefined;\n\t\tif (!specifiers) continue;\n\t\tfor (const spec of specifiers) {\n\t\t\tif (spec.type !== \"ImportSpecifier\") continue;\n\t\t\tif ((spec.importKind as string | undefined) === \"type\") continue;\n\t\t\tconst imported = spec.imported as AnyNode | undefined;\n\t\t\tif (!imported) continue;\n\t\t\t// ESTree allows either an Identifier (name) or a string Literal (value)\n\t\t\t// for the imported binding (e.g. `import { \"foo\" as bar }`).\n\t\t\tconst importedName =\n\t\t\t\timported.type === \"Identifier\"\n\t\t\t\t\t? (imported.name as string | undefined)\n\t\t\t\t\t: imported.type === \"Literal\"\n\t\t\t\t\t\t? typeof imported.value === \"string\"\n\t\t\t\t\t\t\t? imported.value\n\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t: undefined;\n\t\t\tif (importedName !== COLLECTING_NAME) continue;\n\t\t\tconst local = spec.local as AnyNode | undefined;\n\t\t\tif (!local || local.type !== \"Identifier\") continue;\n\t\t\tnames.add(local.name as string);\n\t\t}\n\t}\n\treturn names;\n}\n\n/**\n * If `node` is a string `Literal`, return its string value. Otherwise\n * return `null` so the caller silently skips the call.\n */\nfunction extractStringLiteral(node: AnyNode | undefined): string | null {\n\tif (!node) return null;\n\tif (node.type !== \"Literal\") return null;\n\tif (typeof node.value !== \"string\") return null;\n\treturn node.value;\n}\n\n/**\n * Extract the string values from a plain `{ fieldName: \"Human Label\" }`\n * object literal. Returns an array of label strings, deduped while\n * preserving insertion order. Returns `null` if the shape doesn't match.\n */\nfunction extractLabelKeys(node: AnyNode | undefined): string[] | null {\n\tif (!node || node.type !== \"ObjectExpression\") return null;\n\tconst properties = node.properties as AnyNode[] | undefined;\n\tif (!properties) return null;\n\n\tconst labels: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const prop of properties) {\n\t\tif (prop.type !== \"Property\") continue; // drop SpreadElement silently\n\t\tconst val = prop.value as AnyNode | undefined;\n\t\tif (!val || val.type !== \"Literal\" || typeof val.value !== \"string\")\n\t\t\tcontinue;\n\t\tif (seen.has(val.value)) continue;\n\t\tseen.add(val.value);\n\t\tlabels.push(val.value);\n\t}\n\treturn labels;\n}\n\n/**\n * Recursive AST walker. Visits every `AnyNode` (depth-first) reachable\n * through array / nested-object children and invokes `visit` on each.\n */\nfunction walk(node: AnyNode, visit: (node: AnyNode) => void): void {\n\tvisit(node);\n\tfor (const key of Object.keys(node)) {\n\t\tif (key === \"parent\") continue;\n\t\tconst value = node[key];\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const item of value) {\n\t\t\t\tif (item && typeof item === \"object\" && typeof item.type === \"string\") {\n\t\t\t\t\twalk(item as AnyNode, visit);\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (\n\t\t\tvalue &&\n\t\t\ttypeof value === \"object\" &&\n\t\t\ttypeof (value as { type?: unknown }).type === \"string\"\n\t\t) {\n\t\t\twalk(value as AnyNode, visit);\n\t\t}\n\t}\n}\n","import type { Dirent } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport { extname, join } from \"node:path\";\n\nconst DEFAULT_IGNORES: ReadonlySet<string> = new Set([\n\t\"node_modules\",\n\t\"dist\",\n\t\".git\",\n\t\".next\",\n\t\".output\",\n\t\".svelte-kit\",\n\t\".cache\",\n]);\n\n/**\n * Recursively walks `root`, returning absolute paths of every regular file\n * whose extension is in `extensions`. Directories whose basename appears in\n * the built-in ignore list (or the extra `ignore` argument) are skipped\n * entirely.\n *\n * Missing roots resolve to an empty array — the plugin must not throw if the\n * user's `srcDir` hasn't been created yet.\n */\nexport async function walkSources(\n\troot: string,\n\textensions: readonly string[],\n\tignore: readonly string[] = [],\n): Promise<string[]> {\n\tconst ignored = new Set<string>([...DEFAULT_IGNORES, ...ignore]);\n\tconst exts = new Set(extensions);\n\tconst results: string[] = [];\n\n\tasync function walk(dir: string): Promise<void> {\n\t\tlet entries: Dirent[];\n\t\ttry {\n\t\t\tentries = (await readdir(dir, { withFileTypes: true })) as Dirent[];\n\t\t} catch (err) {\n\t\t\tconst code = (err as NodeJS.ErrnoException).code;\n\t\t\tif (code === \"ENOENT\" || code === \"ENOTDIR\") return;\n\t\t\tthrow err;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tif (ignored.has(entry.name)) continue;\n\t\t\tconst full = join(dir, entry.name);\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tawait walk(full);\n\t\t\t} else if (entry.isFile() && exts.has(extname(entry.name))) {\n\t\t\t\tresults.push(full);\n\t\t\t}\n\t\t}\n\t}\n\n\tawait walk(root);\n\tresults.sort();\n\treturn results;\n}\n","import { readFile } from \"node:fs/promises\";\nimport { relative, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport { extractCollecting } from \"./analyse\";\nimport { walkSources } from \"./scan\";\n\nexport type AutoCollectOptions = {\n\t/**\n\t * Directory walked for `collecting()` calls. Resolved relative to the\n\t * Vite project root. Defaults to `\"src\"`.\n\t */\n\tsrcDir?: string;\n\t/**\n\t * File extensions scanned. Defaults to `[\".ts\", \".tsx\"]`.\n\t */\n\textensions?: string[];\n\t/**\n\t * Extra directory names skipped during the walk. Appended to the built-in\n\t * defaults (`node_modules`, `dist`, `.git`, `.next`, `.output`,\n\t * `.svelte-kit`, `.cache`).\n\t */\n\tignore?: string[];\n};\n\n/**\n * Marker returned from `resolveId` so `load` can recognise a hit. The leading\n * NUL prefix is the Rollup/Vite convention for virtual IDs so other plugins\n * leave it alone.\n */\nconst RESOLVED_VIRTUAL_ID = \"\\0virtual:openpolicy/auto-collected\";\n\n/**\n * Matches any path that lives inside the `@openpolicy/sdk` package, whether\n * it's resolved via a workspace symlink (`.../packages/sdk/...`) or a\n * published `node_modules` install (`.../@openpolicy/sdk/...`). Used to scope\n * the `./auto-collected` relative-import interception to the SDK itself.\n */\nconst SDK_PATH_PATTERN = /[\\\\/](?:@openpolicy[\\\\/]sdk|packages[\\\\/]sdk)[\\\\/]/;\n\n/**\n * Matches the relative specifier the SDK uses for its own internal\n * `./auto-collected` import. Both the source form (`./auto-collected`) and\n * the published dist form (`./auto-collected.js`) need to be intercepted:\n * the former applies when consumers resolve the SDK via its workspace\n * source, the latter when resolving against `dist/` with the separate\n * `auto-collected.js` chunk.\n */\nconst AUTO_COLLECTED_SPECIFIER = /^\\.\\/auto-collected(?:\\.js)?$/;\n\n/**\n * Vite plugin that scans source files for `@openpolicy/sdk` `collecting()`\n * calls at the start of each build and inlines the discovered categories into\n * the SDK's `dataCollected` sentinel.\n *\n * Internally the plugin intercepts `@openpolicy/sdk`'s own relative import of\n * `./auto-collected` and redirects it to a virtual module whose body is a\n * literal `export const dataCollected = { ... }`. Because the replacement\n * becomes part of the consumer's own module graph, the scanned data survives\n * any downstream bundler boundary (e.g. nitro's SSR output), which a shared\n * module-level registry would not.\n */\nexport function autoCollect(options: AutoCollectOptions = {}): Plugin {\n\tconst srcDirOpt = options.srcDir ?? \"src\";\n\tconst extensions = options.extensions ?? [\".ts\", \".tsx\"];\n\tconst ignore = options.ignore ?? [];\n\tlet resolvedSrcDir: string;\n\tlet scanned: Record<string, string[]> = {};\n\n\tasync function scanAndMerge(): Promise<Record<string, string[]>> {\n\t\tconst files = await walkSources(resolvedSrcDir, extensions, ignore);\n\t\tconst merged: Record<string, string[]> = {};\n\t\tfor (const file of files) {\n\t\t\tlet code: string;\n\t\t\ttry {\n\t\t\t\tcode = await readFile(file, \"utf8\");\n\t\t\t} catch {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst extracted = extractCollecting(file, code);\n\t\t\tfor (const [category, labels] of Object.entries(extracted)) {\n\t\t\t\tconst existing = merged[category] ?? [];\n\t\t\t\tconst seen = new Set(existing);\n\t\t\t\tfor (const label of labels) {\n\t\t\t\t\tif (!seen.has(label)) {\n\t\t\t\t\t\texisting.push(label);\n\t\t\t\t\t\tseen.add(label);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tmerged[category] = existing;\n\t\t\t}\n\t\t}\n\t\treturn merged;\n\t}\n\n\t/**\n\t * Returns true when `file` lives inside `resolvedSrcDir` and has one of\n\t * the tracked extensions. Used by the dev-server watcher to skip events\n\t * for unrelated files (configs, public assets, other packages, etc.).\n\t */\n\tfunction isTrackedSource(file: string): boolean {\n\t\tconst rel = relative(resolvedSrcDir, file);\n\t\tif (!rel || rel.startsWith(\"..\")) return false;\n\t\treturn extensions.some((ext) => file.endsWith(ext));\n\t}\n\n\t/**\n\t * Re-runs the scan and, if anything changed, invalidates the virtual\n\t * module and triggers a full page reload. A full reload is used because\n\t * `dataCollected` is spread into the policy config at module-evaluation\n\t * time and the result is captured by the React tree as a prop — there's\n\t * no clean way to hot-swap it in place.\n\t */\n\tasync function rescanAndRefresh(server: ViteDevServer): Promise<void> {\n\t\tconst next = await scanAndMerge();\n\t\tif (JSON.stringify(next) === JSON.stringify(scanned)) return;\n\t\tscanned = next;\n\t\tconst mod = server.moduleGraph.getModuleById(RESOLVED_VIRTUAL_ID);\n\t\tif (mod) server.moduleGraph.invalidateModule(mod);\n\t\tserver.ws.send({ type: \"full-reload\" });\n\t}\n\n\treturn {\n\t\tname: \"openpolicy-auto-collect\",\n\t\tenforce: \"pre\",\n\t\tconfigResolved(config) {\n\t\t\tresolvedSrcDir = resolve(config.root, srcDirOpt);\n\t\t},\n\t\tasync buildStart() {\n\t\t\tscanned = await scanAndMerge();\n\t\t},\n\t\tconfigureServer(server) {\n\t\t\t// Make sure chokidar watches the whole src tree, not just files\n\t\t\t// already in the module graph. Without this, creating a brand-new\n\t\t\t// source file that nothing imports yet wouldn't fire a watcher\n\t\t\t// event — the very case we most need to re-scan on.\n\t\t\tserver.watcher.add(resolvedSrcDir);\n\n\t\t\tconst handler = async (file: string): Promise<void> => {\n\t\t\t\tif (!isTrackedSource(file)) return;\n\t\t\t\t// Surface errors via the logger but don't rethrow — an\n\t\t\t\t// unhandled rejection would crash the watcher process.\n\t\t\t\ttry {\n\t\t\t\t\tawait rescanAndRefresh(server);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tserver.config.logger.error(\n\t\t\t\t\t\t`[openpolicy-auto-collect] rescan failed: ${error}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t};\n\n\t\t\tserver.watcher.on(\"change\", handler);\n\t\t\tserver.watcher.on(\"add\", handler);\n\t\t\tserver.watcher.on(\"unlink\", handler);\n\t\t},\n\t\tasync resolveId(source, importer, resolveOptions) {\n\t\t\tif (!importer || !AUTO_COLLECTED_SPECIFIER.test(source)) return null;\n\t\t\t// Defer to Vite's resolver first so we only redirect when the\n\t\t\t// relative specifier actually points inside @openpolicy/sdk.\n\t\t\tconst resolved = await this.resolve(source, importer, {\n\t\t\t\t...resolveOptions,\n\t\t\t\tskipSelf: true,\n\t\t\t});\n\t\t\tif (!resolved) return null;\n\t\t\tif (!SDK_PATH_PATTERN.test(resolved.id)) return null;\n\t\t\treturn RESOLVED_VIRTUAL_ID;\n\t\t},\n\t\tload(id) {\n\t\t\tif (id !== RESOLVED_VIRTUAL_ID) return null;\n\t\t\treturn `export const dataCollected = ${JSON.stringify(scanned)};\\n`;\n\t\t},\n\t};\n}\n"],"mappings":";;;;AAEA,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;;;;;;;;;;;;;;;AAkBxB,SAAgB,kBACf,UACA,MAC2B;CAC3B,IAAI;AACJ,KAAI;AACH,WAAS,UAAU,UAAU,KAAK;SAC3B;AACP,UAAQ,KAAK,4CAA4C,WAAW;AACpE,SAAO,EAAE;;AAGV,KAAI,OAAO,OAAO,SAAS;MAGZ,OAAO,OAAO,MAAM,MAAM,EAAE,aAAc,QAAkB,EAC/D;AACV,WAAQ,KAAK,4CAA4C,WAAW;AACpE,UAAO,EAAE;;;CAIX,MAAM,UAAU,OAAO;CACvB,MAAM,aAAa,6BAA6B,QAAQ;AACxD,KAAI,WAAW,SAAS,EAAG,QAAO,EAAE;CAEpC,MAAM,MAAgC,EAAE;AACxC,MAAK,UAAU,SAAS;AACvB,MAAI,KAAK,SAAS,iBAAkB;EACpC,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,UAAU,OAAO,SAAS,aAAc;AAC7C,MAAI,CAAC,WAAW,IAAI,OAAO,KAAe,CAAE;EAE5C,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG;EAE9B,MAAM,WAAW,qBAAqB,KAAK,GAAG;AAC9C,MAAI,aAAa,KAAM;EAEvB,MAAM,SAAS,iBAAiB,KAAK,GAAG;AACxC,MAAI,WAAW,KAAM;EAErB,MAAM,WAAW,IAAI,aAAa,EAAE;EACpC,MAAM,OAAO,IAAI,IAAI,SAAS;AAC9B,OAAK,MAAM,SAAS,OACnB,KAAI,CAAC,KAAK,IAAI,MAAM,EAAE;AACrB,YAAS,KAAK,MAAM;AACpB,QAAK,IAAI,MAAM;;AAGjB,MAAI,YAAY;GACf;AACF,QAAO;;;;;;;AAQR,SAAS,6BAA6B,SAA+B;CACpE,MAAM,wBAAQ,IAAI,KAAa;CAC/B,MAAM,OAAO,QAAQ;AACrB,KAAI,CAAC,KAAM,QAAO;AAClB,MAAK,MAAM,QAAQ,MAAM;AACxB,MAAI,KAAK,SAAS,oBAAqB;AACvC,MAAK,KAAK,eAAsC,OAAQ;EACxD,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,UAAU,OAAO,UAAU,cAAe;EAC/C,MAAM,aAAa,KAAK;AACxB,MAAI,CAAC,WAAY;AACjB,OAAK,MAAM,QAAQ,YAAY;AAC9B,OAAI,KAAK,SAAS,kBAAmB;AACrC,OAAK,KAAK,eAAsC,OAAQ;GACxD,MAAM,WAAW,KAAK;AACtB,OAAI,CAAC,SAAU;AAWf,QAPC,SAAS,SAAS,eACd,SAAS,OACV,SAAS,SAAS,YACjB,OAAO,SAAS,UAAU,WACzB,SAAS,QACT,KAAA,IACD,KAAA,OACgB,gBAAiB;GACtC,MAAM,QAAQ,KAAK;AACnB,OAAI,CAAC,SAAS,MAAM,SAAS,aAAc;AAC3C,SAAM,IAAI,MAAM,KAAe;;;AAGjC,QAAO;;;;;;AAOR,SAAS,qBAAqB,MAA0C;AACvE,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,KAAK,SAAS,UAAW,QAAO;AACpC,KAAI,OAAO,KAAK,UAAU,SAAU,QAAO;AAC3C,QAAO,KAAK;;;;;;;AAQb,SAAS,iBAAiB,MAA4C;AACrE,KAAI,CAAC,QAAQ,KAAK,SAAS,mBAAoB,QAAO;CACtD,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,SAAmB,EAAE;CAC3B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,QAAQ,YAAY;AAC9B,MAAI,KAAK,SAAS,WAAY;EAC9B,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,OAAO,IAAI,SAAS,aAAa,OAAO,IAAI,UAAU,SAC1D;AACD,MAAI,KAAK,IAAI,IAAI,MAAM,CAAE;AACzB,OAAK,IAAI,IAAI,MAAM;AACnB,SAAO,KAAK,IAAI,MAAM;;AAEvB,QAAO;;;;;;AAOR,SAAS,KAAK,MAAe,OAAsC;AAClE,OAAM,KAAK;AACX,MAAK,MAAM,OAAO,OAAO,KAAK,KAAK,EAAE;AACpC,MAAI,QAAQ,SAAU;EACtB,MAAM,QAAQ,KAAK;AACnB,MAAI,MAAM,QAAQ,MAAM;QAClB,MAAM,QAAQ,MAClB,KAAI,QAAQ,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,SAC5D,MAAK,MAAiB,MAAM;aAI9B,SACA,OAAO,UAAU,YACjB,OAAQ,MAA6B,SAAS,SAE9C,MAAK,OAAkB,MAAM;;;;;ACvKhC,MAAM,kBAAuC,IAAI,IAAI;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;;;;;;;;;;AAWF,eAAsB,YACrB,MACA,YACA,SAA4B,EAAE,EACV;CACpB,MAAM,UAAU,IAAI,IAAY,CAAC,GAAG,iBAAiB,GAAG,OAAO,CAAC;CAChE,MAAM,OAAO,IAAI,IAAI,WAAW;CAChC,MAAM,UAAoB,EAAE;CAE5B,eAAe,KAAK,KAA4B;EAC/C,IAAI;AACJ,MAAI;AACH,aAAW,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;WAC9C,KAAK;GACb,MAAM,OAAQ,IAA8B;AAC5C,OAAI,SAAS,YAAY,SAAS,UAAW;AAC7C,SAAM;;AAEP,OAAK,MAAM,SAAS,SAAS;AAC5B,OAAI,QAAQ,IAAI,MAAM,KAAK,CAAE;GAC7B,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,OAAI,MAAM,aAAa,CACtB,OAAM,KAAK,KAAK;YACN,MAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,MAAM,KAAK,CAAC,CACzD,SAAQ,KAAK,KAAK;;;AAKrB,OAAM,KAAK,KAAK;AAChB,SAAQ,MAAM;AACd,QAAO;;;;;;;;;ACzBR,MAAM,sBAAsB;;;;;;;AAQ5B,MAAM,mBAAmB;;;;;;;;;AAUzB,MAAM,2BAA2B;;;;;;;;;;;;;AAcjC,SAAgB,YAAY,UAA8B,EAAE,EAAU;CACrE,MAAM,YAAY,QAAQ,UAAU;CACpC,MAAM,aAAa,QAAQ,cAAc,CAAC,OAAO,OAAO;CACxD,MAAM,SAAS,QAAQ,UAAU,EAAE;CACnC,IAAI;CACJ,IAAI,UAAoC,EAAE;CAE1C,eAAe,eAAkD;EAChE,MAAM,QAAQ,MAAM,YAAY,gBAAgB,YAAY,OAAO;EACnE,MAAM,SAAmC,EAAE;AAC3C,OAAK,MAAM,QAAQ,OAAO;GACzB,IAAI;AACJ,OAAI;AACH,WAAO,MAAM,SAAS,MAAM,OAAO;WAC5B;AACP;;GAED,MAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,QAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,UAAU,EAAE;IAC3D,MAAM,WAAW,OAAO,aAAa,EAAE;IACvC,MAAM,OAAO,IAAI,IAAI,SAAS;AAC9B,SAAK,MAAM,SAAS,OACnB,KAAI,CAAC,KAAK,IAAI,MAAM,EAAE;AACrB,cAAS,KAAK,MAAM;AACpB,UAAK,IAAI,MAAM;;AAGjB,WAAO,YAAY;;;AAGrB,SAAO;;;;;;;CAQR,SAAS,gBAAgB,MAAuB;EAC/C,MAAM,MAAM,SAAS,gBAAgB,KAAK;AAC1C,MAAI,CAAC,OAAO,IAAI,WAAW,KAAK,CAAE,QAAO;AACzC,SAAO,WAAW,MAAM,QAAQ,KAAK,SAAS,IAAI,CAAC;;;;;;;;;CAUpD,eAAe,iBAAiB,QAAsC;EACrE,MAAM,OAAO,MAAM,cAAc;AACjC,MAAI,KAAK,UAAU,KAAK,KAAK,KAAK,UAAU,QAAQ,CAAE;AACtD,YAAU;EACV,MAAM,MAAM,OAAO,YAAY,cAAc,oBAAoB;AACjE,MAAI,IAAK,QAAO,YAAY,iBAAiB,IAAI;AACjD,SAAO,GAAG,KAAK,EAAE,MAAM,eAAe,CAAC;;AAGxC,QAAO;EACN,MAAM;EACN,SAAS;EACT,eAAe,QAAQ;AACtB,oBAAiB,QAAQ,OAAO,MAAM,UAAU;;EAEjD,MAAM,aAAa;AAClB,aAAU,MAAM,cAAc;;EAE/B,gBAAgB,QAAQ;AAKvB,UAAO,QAAQ,IAAI,eAAe;GAElC,MAAM,UAAU,OAAO,SAAgC;AACtD,QAAI,CAAC,gBAAgB,KAAK,CAAE;AAG5B,QAAI;AACH,WAAM,iBAAiB,OAAO;aACtB,OAAO;AACf,YAAO,OAAO,OAAO,MACpB,4CAA4C,QAC5C;;;AAIH,UAAO,QAAQ,GAAG,UAAU,QAAQ;AACpC,UAAO,QAAQ,GAAG,OAAO,QAAQ;AACjC,UAAO,QAAQ,GAAG,UAAU,QAAQ;;EAErC,MAAM,UAAU,QAAQ,UAAU,gBAAgB;AACjD,OAAI,CAAC,YAAY,CAAC,yBAAyB,KAAK,OAAO,CAAE,QAAO;GAGhE,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,UAAU;IACrD,GAAG;IACH,UAAU;IACV,CAAC;AACF,OAAI,CAAC,SAAU,QAAO;AACtB,OAAI,CAAC,iBAAiB,KAAK,SAAS,GAAG,CAAE,QAAO;AAChD,UAAO;;EAER,KAAK,IAAI;AACR,OAAI,OAAO,oBAAqB,QAAO;AACvC,UAAO,gCAAgC,KAAK,UAAU,QAAQ,CAAC;;EAEhE"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/analyse.ts","../src/known-packages.ts","../src/scan.ts","../src/index.ts"],"sourcesContent":["import { parseSync } from \"oxc-parser\";\n\nconst SDK_SPECIFIER = \"@openpolicy/sdk\";\nconst COLLECTING_NAME = \"collecting\";\nconst THIRD_PARTY_NAME = \"thirdParty\";\n\ntype AnyNode = { type: string; [key: string]: unknown };\n\nexport type ThirdPartyEntry = {\n\tname: string;\n\tpurpose: string;\n\tpolicyUrl: string;\n};\n\nexport type ExtractResult = {\n\tdataCollected: Record<string, string[]>;\n\tthirdParties: ThirdPartyEntry[];\n};\n\n/**\n * Extract `collecting()` and `thirdParty()` call metadata from a single source file.\n *\n * Returns an `ExtractResult` with `dataCollected` (category → labels) and\n * `thirdParties` (array of third-party entries). Files with no matching calls\n * — or that fail to parse — return empty defaults.\n *\n * The analyser runs in two phases:\n * 1. Collect local names bound to `collecting` / `thirdParty` imported from\n *    `@openpolicy/sdk` (handles renamed imports, skips type-only imports,\n *    ignores look-alikes imported from other modules).\n * 2. Walk the program body and inspect every `CallExpression` whose callee\n *    is one of those tracked local names.\n */\nexport function extractFromFile(filename: string, code: string): ExtractResult {\n\tconst empty: ExtractResult = { dataCollected: {}, thirdParties: [] };\n\tlet result: ReturnType<typeof parseSync>;\n\ttry {\n\t\tresult = parseSync(filename, code);\n\t} catch {\n\t\tconsole.warn(`[openpolicy-auto-collect] parse error in ${filename}`);\n\t\treturn empty;\n\t}\n\n\tif (result.errors.length > 0) {\n\t\t// Hard parse failures only — oxc reports recoverable errors but still\n\t\t// produces a usable AST, so we keep going and let the walker decide.\n\t\tconst fatal = result.errors.some((e) => e.severity === (\"Error\" as never));\n\t\tif (fatal) {\n\t\t\tconsole.warn(`[openpolicy-auto-collect] parse error in ${filename}`);\n\t\t\treturn empty;\n\t\t}\n\t}\n\n\tconst program = result.program as unknown as AnyNode;\n\tconst collectingNames = collectSdkBindings(program, COLLECTING_NAME);\n\tconst thirdPartyNames = collectSdkBindings(program, THIRD_PARTY_NAME);\n\tif (collectingNames.size === 0 && thirdPartyNames.size === 0) return empty;\n\n\tconst dataCollected: Record<string, string[]> = {};\n\tconst thirdParties: ThirdPartyEntry[] = [];\n\tconst seenThirdParties = new Set<string>();\n\n\twalk(program, (node) => {\n\t\tif (node.type !== \"CallExpression\") return;\n\t\tconst callee = node.callee as AnyNode | undefined;\n\t\tif (!callee || callee.type !== \"Identifier\") return;\n\t\tconst calleeName = callee.name as string;\n\t\tconst args = node.arguments as AnyNode[] | undefined;\n\n\t\tif (collectingNames.has(calleeName)) {\n\t\t\tif (!args || args.length < 3) return;\n\t\t\tconst category = extractStringLiteral(args[0]);\n\t\t\tif (category === null) return;\n\t\t\tconst labels = extractLabelKeys(args[2]);\n\t\t\tif (labels === null) return;\n\t\t\tconst existing = dataCollected[category] ?? [];\n\t\t\tconst seen = new Set(existing);\n\t\t\tfor (const label of labels) {\n\t\t\t\tif (!seen.has(label)) {\n\t\t\t\t\texisting.push(label);\n\t\t\t\t\tseen.add(label);\n\t\t\t\t}\n\t\t\t}\n\t\t\tdataCollected[category] = existing;\n\t\t} else if (thirdPartyNames.has(calleeName)) {\n\t\t\tif (!args || args.length < 3) return;\n\t\t\tconst name = extractStringLiteral(args[0]);\n\t\t\tif (name === null) return;\n\t\t\tconst purpose = extractStringLiteral(args[1]);\n\t\t\tif (purpose === null) return;\n\t\t\tconst policyUrl = extractStringLiteral(args[2]);\n\t\t\tif (policyUrl === null) return;\n\t\t\t// Deduplicate by name — first occurrence wins (files walked in sorted order)\n\t\t\tif (seenThirdParties.has(name)) return;\n\t\t\tseenThirdParties.add(name);\n\t\t\tthirdParties.push({ name, purpose, policyUrl });\n\t\t}\n\t});\n\n\treturn { dataCollected, thirdParties };\n}\n\n/**\n * Walk `ImportDeclaration` nodes and return the local names bound to the given\n * `exportName` imported from `@openpolicy/sdk`. Skips type-only imports and\n * specifiers whose imported name doesn't match.\n */\nfunction collectSdkBindings(program: AnyNode, exportName: string): Set<string> {\n\tconst names = new Set<string>();\n\tconst body = program.body as AnyNode[] | undefined;\n\tif (!body) return names;\n\tfor (const node of body) {\n\t\tif (node.type !== \"ImportDeclaration\") continue;\n\t\tif ((node.importKind as string | undefined) === \"type\") continue;\n\t\tconst source = node.source as AnyNode | undefined;\n\t\tif (!source || source.value !== SDK_SPECIFIER) continue;\n\t\tconst specifiers = node.specifiers as AnyNode[] | undefined;\n\t\tif (!specifiers) continue;\n\t\tfor (const spec of specifiers) {\n\t\t\tif (spec.type !== \"ImportSpecifier\") continue;\n\t\t\tif ((spec.importKind as string | undefined) === \"type\") continue;\n\t\t\tconst imported = spec.imported as AnyNode | undefined;\n\t\t\tif (!imported) continue;\n\t\t\t// ESTree allows either an Identifier (name) or a string Literal (value)\n\t\t\t// for the imported binding (e.g. `import { \"foo\" as bar }`).\n\t\t\tconst importedName =\n\t\t\t\timported.type === \"Identifier\"\n\t\t\t\t\t? (imported.name as string | undefined)\n\t\t\t\t\t: imported.type === \"Literal\"\n\t\t\t\t\t\t? typeof imported.value === \"string\"\n\t\t\t\t\t\t\t? imported.value\n\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t: undefined;\n\t\t\tif (importedName !== exportName) continue;\n\t\t\tconst local = spec.local as AnyNode | undefined;\n\t\t\tif (!local || local.type !== \"Identifier\") continue;\n\t\t\tnames.add(local.name as string);\n\t\t}\n\t}\n\treturn names;\n}\n\n/**\n * If `node` is a string `Literal`, return its string value. Otherwise\n * return `null` so the caller silently skips the call.\n */\nfunction extractStringLiteral(node: AnyNode | undefined): string | null {\n\tif (!node) return null;\n\tif (node.type !== \"Literal\") return null;\n\tif (typeof node.value !== \"string\") return null;\n\treturn node.value;\n}\n\n/**\n * Extract the string values from a plain `{ fieldName: \"Human Label\" }`\n * object literal. Returns an array of label strings, deduped while\n * preserving insertion order. Returns `null` if the shape doesn't match.\n */\nfunction extractLabelKeys(node: AnyNode | undefined): string[] | null {\n\tif (!node || node.type !== \"ObjectExpression\") return null;\n\tconst properties = node.properties as AnyNode[] | undefined;\n\tif (!properties) return null;\n\n\tconst labels: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const prop of properties) {\n\t\tif (prop.type !== \"Property\") continue; // drop SpreadElement silently\n\t\tconst val = prop.value as AnyNode | undefined;\n\t\tif (!val || val.type !== \"Literal\" || typeof val.value !== \"string\")\n\t\t\tcontinue;\n\t\tif (seen.has(val.value)) continue;\n\t\tseen.add(val.value);\n\t\tlabels.push(val.value);\n\t}\n\treturn labels;\n}\n\n/**\n * Recursive AST walker. Visits every `AnyNode` (depth-first) reachable\n * through array / nested-object children and invokes `visit` on each.\n */\nfunction walk(node: AnyNode, visit: (node: AnyNode) => void): void {\n\tvisit(node);\n\tfor (const key of Object.keys(node)) {\n\t\tif (key === \"parent\") continue;\n\t\tconst value = node[key];\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const item of value) {\n\t\t\t\tif (item && typeof item === \"object\" && typeof item.type === \"string\") {\n\t\t\t\t\twalk(item as AnyNode, visit);\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (\n\t\t\tvalue &&\n\t\t\ttypeof value === \"object\" &&\n\t\t\ttypeof (value as { type?: unknown }).type === \"string\"\n\t\t) {\n\t\t\twalk(value as AnyNode, visit);\n\t\t}\n\t}\n}\n","import type { ThirdPartyEntry } from \"./analyse\";\n\n/**\n * Registry of known npm packages mapped to their ThirdPartyEntry metadata.\n * Multiple package names can point to the same service — deduplication by\n * `ThirdPartyEntry.name` is handled at merge time in the caller.\n */\nexport const KNOWN_PACKAGES: ReadonlyMap<string, ThirdPartyEntry> = new Map([\n\t[\n\t\t\"stripe\",\n\t\t{\n\t\t\tname: \"Stripe\",\n\t\t\tpurpose: \"Payment processing\",\n\t\t\tpolicyUrl: \"https://stripe.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"@stripe/stripe-js\",\n\t\t{\n\t\t\tname: \"Stripe\",\n\t\t\tpurpose: \"Payment processing\",\n\t\t\tpolicyUrl: \"https://stripe.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"braintree\",\n\t\t{\n\t\t\tname: \"Braintree\",\n\t\t\tpurpose: \"Payment processing\",\n\t\t\tpolicyUrl:\n\t\t\t\t\"https://www.braintreepayments.com/legal/braintree-privacy-policy\",\n\t\t},\n\t],\n\t[\n\t\t\"@braintree/browser-drop-in\",\n\t\t{\n\t\t\tname: \"Braintree\",\n\t\t\tpurpose: \"Payment processing\",\n\t\t\tpolicyUrl:\n\t\t\t\t\"https://www.braintreepayments.com/legal/braintree-privacy-policy\",\n\t\t},\n\t],\n\t[\n\t\t\"@sentry/browser\",\n\t\t{\n\t\t\tname: \"Sentry\",\n\t\t\tpurpose: \"Error tracking\",\n\t\t\tpolicyUrl: \"https://sentry.io/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@sentry/node\",\n\t\t{\n\t\t\tname: \"Sentry\",\n\t\t\tpurpose: \"Error tracking\",\n\t\t\tpolicyUrl: \"https://sentry.io/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@sentry/nextjs\",\n\t\t{\n\t\t\tname: \"Sentry\",\n\t\t\tpurpose: \"Error tracking\",\n\t\t\tpolicyUrl: \"https://sentry.io/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@sentry/react\",\n\t\t{\n\t\t\tname: \"Sentry\",\n\t\t\tpurpose: \"Error tracking\",\n\t\t\tpolicyUrl: \"https://sentry.io/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@sentry/vue\",\n\t\t{\n\t\t\tname: \"Sentry\",\n\t\t\tpurpose: \"Error tracking\",\n\t\t\tpolicyUrl: \"https://sentry.io/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@datadog/browser-rum\",\n\t\t{\n\t\t\tname: \"Datadog\",\n\t\t\tpurpose: \"Monitoring\",\n\t\t\tpolicyUrl: \"https://www.datadoghq.com/legal/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"dd-trace\",\n\t\t{\n\t\t\tname: \"Datadog\",\n\t\t\tpurpose: \"Monitoring\",\n\t\t\tpolicyUrl: \"https://www.datadoghq.com/legal/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"posthog-js\",\n\t\t{\n\t\t\tname: \"PostHog\",\n\t\t\tpurpose: \"Product analytics\",\n\t\t\tpolicyUrl: \"https://posthog.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"posthog-node\",\n\t\t{\n\t\t\tname: \"PostHog\",\n\t\t\tpurpose: \"Product analytics\",\n\t\t\tpolicyUrl: \"https://posthog.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"mixpanel-browser\",\n\t\t{\n\t\t\tname: \"Mixpanel\",\n\t\t\tpurpose: \"Product analytics\",\n\t\t\tpolicyUrl: \"https://mixpanel.com/legal/privacy-policy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@segment/analytics-next\",\n\t\t{\n\t\t\tname: \"Segment\",\n\t\t\tpurpose: \"Customer data platform\",\n\t\t\tpolicyUrl: \"https://www.twilio.com/en-us/legal/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"@amplitude/analytics-browser\",\n\t\t{\n\t\t\tname: \"Amplitude\",\n\t\t\tpurpose: \"Product analytics\",\n\t\t\tpolicyUrl: \"https://amplitude.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"amplitude-js\",\n\t\t{\n\t\t\tname: \"Amplitude\",\n\t\t\tpurpose: \"Product analytics\",\n\t\t\tpolicyUrl: \"https://amplitude.com/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"@vercel/analytics\",\n\t\t{\n\t\t\tname: \"Vercel Analytics\",\n\t\t\tpurpose: \"Web analytics\",\n\t\t\tpolicyUrl: \"https://vercel.com/legal/privacy-policy\",\n\t\t},\n\t],\n\t[\n\t\t\"plausible-tracker\",\n\t\t{\n\t\t\tname: \"Plausible\",\n\t\t\tpurpose: \"Web analytics\",\n\t\t\tpolicyUrl: \"https://plausible.io/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"logrocket\",\n\t\t{\n\t\t\tname: \"LogRocket\",\n\t\t\tpurpose: \"Session recording\",\n\t\t\tpolicyUrl: \"https://logrocket.com/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"@hotjar/browser\",\n\t\t{\n\t\t\tname: \"Hotjar\",\n\t\t\tpurpose: \"Session recording\",\n\t\t\tpolicyUrl: \"https://www.hotjar.com/legal/policies/privacy/\",\n\t\t},\n\t],\n\t[\n\t\t\"resend\",\n\t\t{\n\t\t\tname: \"Resend\",\n\t\t\tpurpose: \"Transactional email\",\n\t\t\tpolicyUrl: \"https://resend.com/legal/privacy-policy\",\n\t\t},\n\t],\n\t[\n\t\t\"@sendgrid/mail\",\n\t\t{\n\t\t\tname: \"SendGrid\",\n\t\t\tpurpose: \"Transactional email\",\n\t\t\tpolicyUrl: \"https://www.twilio.com/en-us/legal/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"intercom-client\",\n\t\t{\n\t\t\tname: \"Intercom\",\n\t\t\tpurpose: \"Customer messaging\",\n\t\t\tpolicyUrl: \"https://www.intercom.com/legal/privacy\",\n\t\t},\n\t],\n\t[\n\t\t\"@intercom/messenger-js-sdk\",\n\t\t{\n\t\t\tname: \"Intercom\",\n\t\t\tpurpose: \"Customer messaging\",\n\t\t\tpolicyUrl: \"https://www.intercom.com/legal/privacy\",\n\t\t},\n\t],\n]);\n","import type { Dirent } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport { extname, join } from \"node:path\";\n\nconst DEFAULT_IGNORES: ReadonlySet<string> = new Set([\n\t\"node_modules\",\n\t\"dist\",\n\t\".git\",\n\t\".next\",\n\t\".output\",\n\t\".svelte-kit\",\n\t\".cache\",\n]);\n\n/**\n * Recursively walks `root`, returning absolute paths of every regular file\n * whose extension is in `extensions`. Directories whose basename appears in\n * the built-in ignore list (or the extra `ignore` argument) are skipped\n * entirely.\n *\n * Missing roots resolve to an empty array — the plugin must not throw if the\n * user's `srcDir` hasn't been created yet.\n */\nexport async function walkSources(\n\troot: string,\n\textensions: readonly string[],\n\tignore: readonly string[] = [],\n): Promise<string[]> {\n\tconst ignored = new Set<string>([...DEFAULT_IGNORES, ...ignore]);\n\tconst exts = new Set(extensions);\n\tconst results: string[] = [];\n\n\tasync function walk(dir: string): Promise<void> {\n\t\tlet entries: Dirent[];\n\t\ttry {\n\t\t\tentries = (await readdir(dir, { withFileTypes: true })) as Dirent[];\n\t\t} catch (err) {\n\t\t\tconst code = (err as NodeJS.ErrnoException).code;\n\t\t\tif (code === \"ENOENT\" || code === \"ENOTDIR\") return;\n\t\t\tthrow err;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tif (ignored.has(entry.name)) continue;\n\t\t\tconst full = join(dir, entry.name);\n\t\t\tif (entry.isDirectory()) {\n\t\t\t\tawait walk(full);\n\t\t\t} else if (entry.isFile() && exts.has(extname(entry.name))) {\n\t\t\t\tresults.push(full);\n\t\t\t}\n\t\t}\n\t}\n\n\tawait walk(root);\n\tresults.sort();\n\treturn results;\n}\n","import { readFile } from \"node:fs/promises\";\nimport { relative, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport { extractFromFile, type ThirdPartyEntry } from \"./analyse\";\nimport { KNOWN_PACKAGES } from \"./known-packages\";\nimport { walkSources } from \"./scan\";\n\nexport type AutoCollectOptions = {\n\t/**\n\t * Directory walked for `collecting()` calls. Resolved relative to the\n\t * Vite project root. Defaults to `\"src\"`.\n\t */\n\tsrcDir?: string;\n\t/**\n\t * File extensions scanned. Defaults to `[\".ts\", \".tsx\"]`.\n\t */\n\textensions?: string[];\n\t/**\n\t * Extra directory names skipped during the walk. Appended to the built-in\n\t * defaults (`node_modules`, `dist`, `.git`, `.next`, `.output`,\n\t * `.svelte-kit`, `.cache`).\n\t */\n\tignore?: string[];\n\n\tthirdParties?: {\n\t\tusePackageJson?: boolean;\n\t};\n};\n\n/**\n * Marker returned from `resolveId` so `load` can recognise a hit. The leading\n * NUL prefix is the Rollup/Vite convention for virtual IDs so other plugins\n * leave it alone.\n */\nconst RESOLVED_VIRTUAL_ID = \"\\0virtual:openpolicy/auto-collected\";\n\n/**\n * Matches any path that lives inside the `@openpolicy/sdk` package, whether\n * it's resolved via a workspace symlink (`.../packages/sdk/...`) or a\n * published `node_modules` install (`.../@openpolicy/sdk/...`). Used to scope\n * the `./auto-collected` relative-import interception to the SDK itself.\n */\nconst SDK_PATH_PATTERN = /[\\\\/](?:@openpolicy[\\\\/]sdk|packages[\\\\/]sdk)[\\\\/]/;\n\n/**\n * Matches the relative specifier the SDK uses for its own internal\n * `./auto-collected` import. Both the source form (`./auto-collected`) and\n * the published dist form (`./auto-collected.js`) need to be intercepted:\n * the former applies when consumers resolve the SDK via its workspace\n * source, the latter when resolving against `dist/` with the separate\n * `auto-collected.js` chunk.\n */\nconst AUTO_COLLECTED_SPECIFIER = /^\\.\\/auto-collected(?:\\.js)?$/;\n\n/**\n * Vite plugin that scans source files for `@openpolicy/sdk` `collecting()`\n * calls at the start of each build and inlines the discovered categories into\n * the SDK's `dataCollected` sentinel.\n *\n * Internally the plugin intercepts `@openpolicy/sdk`'s own relative import of\n * `./auto-collected` and redirects it to a virtual module whose body is a\n * literal `export const dataCollected = { ... }`. Because the replacement\n * becomes part of the consumer's own module graph, the scanned data survives\n * any downstream bundler boundary (e.g. nitro's SSR output), which a shared\n * module-level registry would not.\n */\nexport function autoCollect(options: AutoCollectOptions = {}): Plugin {\n\tconst srcDirOpt = options.srcDir ?? \"src\";\n\tconst extensions = options.extensions ?? [\".ts\", \".tsx\"];\n\tconst ignore = options.ignore ?? [];\n\tconst usePackageJsonOpt = options.thirdParties?.usePackageJson ?? false;\n\tlet resolvedRoot: string;\n\tlet resolvedSrcDir: string;\n\tlet scanned: {\n\t\tdataCollected: Record<string, string[]>;\n\t\tthirdParties: ThirdPartyEntry[];\n\t} = { dataCollected: {}, thirdParties: [] };\n\n\tasync function detectFromPackageJson(\n\t\troot: string,\n\t): Promise<ThirdPartyEntry[]> {\n\t\tlet raw: string;\n\t\ttry {\n\t\t\traw = await readFile(resolve(root, \"package.json\"), \"utf8\");\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t\tlet pkg: {\n\t\t\tdependencies?: Record<string, string>;\n\t\t\tdevDependencies?: Record<string, string>;\n\t\t};\n\t\ttry {\n\t\t\tpkg = JSON.parse(raw) as typeof pkg;\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t\tconst allDeps = {\n\t\t\t...pkg.dependencies,\n\t\t\t...pkg.devDependencies,\n\t\t};\n\t\tconst entries: ThirdPartyEntry[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tfor (const pkgName of Object.keys(allDeps)) {\n\t\t\tconst entry = KNOWN_PACKAGES.get(pkgName);\n\t\t\tif (entry && !seenNames.has(entry.name)) {\n\t\t\t\tseenNames.add(entry.name);\n\t\t\t\tentries.push(entry);\n\t\t\t}\n\t\t}\n\t\treturn entries;\n\t}\n\n\tasync function scanAndMerge(): Promise<typeof scanned> {\n\t\tconst files = await walkSources(resolvedSrcDir, extensions, ignore);\n\t\tconst mergedData: Record<string, string[]> = {};\n\t\tconst mergedParties: ThirdPartyEntry[] = [];\n\t\tconst seenParties = new Set<string>();\n\t\tfor (const file of files) {\n\t\t\tlet code: string;\n\t\t\ttry {\n\t\t\t\tcode = await readFile(file, \"utf8\");\n\t\t\t} catch {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst extracted = extractFromFile(file, code);\n\t\t\tfor (const [category, labels] of Object.entries(\n\t\t\t\textracted.dataCollected,\n\t\t\t)) {\n\t\t\t\tconst existing = mergedData[category] ?? [];\n\t\t\t\tconst seen = new Set(existing);\n\t\t\t\tfor (const label of labels) {\n\t\t\t\t\tif (!seen.has(label)) {\n\t\t\t\t\t\texisting.push(label);\n\t\t\t\t\t\tseen.add(label);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tmergedData[category] = existing;\n\t\t\t}\n\t\t\tfor (const entry of extracted.thirdParties) {\n\t\t\t\tif (!seenParties.has(entry.name)) {\n\t\t\t\t\tseenParties.add(entry.name);\n\t\t\t\t\tmergedParties.push(entry);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (usePackageJsonOpt) {\n\t\t\tconst pkgEntries = await detectFromPackageJson(resolvedRoot);\n\t\t\tfor (const entry of pkgEntries) {\n\t\t\t\tif (!seenParties.has(entry.name)) {\n\t\t\t\t\tseenParties.add(entry.name);\n\t\t\t\t\tmergedParties.push(entry);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn { dataCollected: mergedData, thirdParties: mergedParties };\n\t}\n\n\t/**\n\t * Returns true when `file` lives inside `resolvedSrcDir` and has one of\n\t * the tracked extensions. Used by the dev-server watcher to skip events\n\t * for unrelated files (configs, public assets, other packages, etc.).\n\t */\n\tfunction isTrackedSource(file: string): boolean {\n\t\tconst rel = relative(resolvedSrcDir, file);\n\t\tif (!rel || rel.startsWith(\"..\")) return false;\n\t\treturn extensions.some((ext) => file.endsWith(ext));\n\t}\n\n\t/**\n\t * Re-runs the scan and, if anything changed, invalidates the virtual\n\t * module and triggers a full page reload. A full reload is used because\n\t * `dataCollected` is spread into the policy config at module-evaluation\n\t * time and the result is captured by the React tree as a prop — there's\n\t * no clean way to hot-swap it in place.\n\t */\n\tasync function rescanAndRefresh(server: ViteDevServer): Promise<void> {\n\t\tconst next = await scanAndMerge();\n\t\tif (JSON.stringify(next) === JSON.stringify(scanned)) return;\n\t\tscanned = next;\n\t\tconst mod = server.moduleGraph.getModuleById(RESOLVED_VIRTUAL_ID);\n\t\tif (mod) server.moduleGraph.invalidateModule(mod);\n\t\tserver.ws.send({ type: \"full-reload\" });\n\t}\n\n\treturn {\n\t\tname: \"openpolicy-auto-collect\",\n\t\tenforce: \"pre\",\n\t\tconfigResolved(config) {\n\t\t\tresolvedRoot = config.root;\n\t\t\tresolvedSrcDir = resolve(config.root, srcDirOpt);\n\t\t},\n\t\tasync buildStart() {\n\t\t\tscanned = await scanAndMerge();\n\t\t},\n\t\tconfigureServer(server) {\n\t\t\t// Make sure chokidar watches the whole src tree, not just files\n\t\t\t// already in the module graph. Without this, creating a brand-new\n\t\t\t// source file that nothing imports yet wouldn't fire a watcher\n\t\t\t// event — the very case we most need to re-scan on.\n\t\t\tserver.watcher.add(resolvedSrcDir);\n\n\t\t\tconst handler = async (file: string): Promise<void> => {\n\t\t\t\tif (!isTrackedSource(file)) return;\n\t\t\t\t// Surface errors via the logger but don't rethrow — an\n\t\t\t\t// unhandled rejection would crash the watcher process.\n\t\t\t\ttry {\n\t\t\t\t\tawait rescanAndRefresh(server);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tserver.config.logger.error(\n\t\t\t\t\t\t`[openpolicy-auto-collect] rescan failed: ${error}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t};\n\n\t\t\tserver.watcher.on(\"change\", handler);\n\t\t\tserver.watcher.on(\"add\", handler);\n\t\t\tserver.watcher.on(\"unlink\", handler);\n\t\t},\n\t\tasync resolveId(source, importer, resolveOptions) {\n\t\t\tif (!importer || !AUTO_COLLECTED_SPECIFIER.test(source)) return null;\n\t\t\t// Defer to Vite's resolver first so we only redirect when the\n\t\t\t// relative specifier actually points inside @openpolicy/sdk.\n\t\t\tconst resolved = await this.resolve(source, importer, {\n\t\t\t\t...resolveOptions,\n\t\t\t\tskipSelf: true,\n\t\t\t});\n\t\t\tif (!resolved) return null;\n\t\t\tif (!SDK_PATH_PATTERN.test(resolved.id)) return null;\n\t\t\treturn RESOLVED_VIRTUAL_ID;\n\t\t},\n\t\tload(id) {\n\t\t\tif (id !== RESOLVED_VIRTUAL_ID) return null;\n\t\t\treturn (\n\t\t\t\t`export const dataCollected = ${JSON.stringify(\n\t\t\t\t\tscanned.dataCollected,\n\t\t\t\t)};\\n` +\n\t\t\t\t`export const thirdParties = ${JSON.stringify(scanned.thirdParties)};\\n`\n\t\t\t);\n\t\t},\n\t};\n}\n"],"mappings":";;;;AAEA,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;;;;;;;;;;;;;;;AA6BzB,SAAgB,gBAAgB,UAAkB,MAA6B;CAC9E,MAAM,QAAuB;EAAE,eAAe,EAAE;EAAE,cAAc,EAAE;EAAE;CACpE,IAAI;AACJ,KAAI;AACH,WAAS,UAAU,UAAU,KAAK;SAC3B;AACP,UAAQ,KAAK,4CAA4C,WAAW;AACpE,SAAO;;AAGR,KAAI,OAAO,OAAO,SAAS;MAGZ,OAAO,OAAO,MAAM,MAAM,EAAE,aAAc,QAAkB,EAC/D;AACV,WAAQ,KAAK,4CAA4C,WAAW;AACpE,UAAO;;;CAIT,MAAM,UAAU,OAAO;CACvB,MAAM,kBAAkB,mBAAmB,SAAS,gBAAgB;CACpE,MAAM,kBAAkB,mBAAmB,SAAS,iBAAiB;AACrE,KAAI,gBAAgB,SAAS,KAAK,gBAAgB,SAAS,EAAG,QAAO;CAErE,MAAM,gBAA0C,EAAE;CAClD,MAAM,eAAkC,EAAE;CAC1C,MAAM,mCAAmB,IAAI,KAAa;AAE1C,MAAK,UAAU,SAAS;AACvB,MAAI,KAAK,SAAS,iBAAkB;EACpC,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,UAAU,OAAO,SAAS,aAAc;EAC7C,MAAM,aAAa,OAAO;EAC1B,MAAM,OAAO,KAAK;AAElB,MAAI,gBAAgB,IAAI,WAAW,EAAE;AACpC,OAAI,CAAC,QAAQ,KAAK,SAAS,EAAG;GAC9B,MAAM,WAAW,qBAAqB,KAAK,GAAG;AAC9C,OAAI,aAAa,KAAM;GACvB,MAAM,SAAS,iBAAiB,KAAK,GAAG;AACxC,OAAI,WAAW,KAAM;GACrB,MAAM,WAAW,cAAc,aAAa,EAAE;GAC9C,MAAM,OAAO,IAAI,IAAI,SAAS;AAC9B,QAAK,MAAM,SAAS,OACnB,KAAI,CAAC,KAAK,IAAI,MAAM,EAAE;AACrB,aAAS,KAAK,MAAM;AACpB,SAAK,IAAI,MAAM;;AAGjB,iBAAc,YAAY;aAChB,gBAAgB,IAAI,WAAW,EAAE;AAC3C,OAAI,CAAC,QAAQ,KAAK,SAAS,EAAG;GAC9B,MAAM,OAAO,qBAAqB,KAAK,GAAG;AAC1C,OAAI,SAAS,KAAM;GACnB,MAAM,UAAU,qBAAqB,KAAK,GAAG;AAC7C,OAAI,YAAY,KAAM;GACtB,MAAM,YAAY,qBAAqB,KAAK,GAAG;AAC/C,OAAI,cAAc,KAAM;AAExB,OAAI,iBAAiB,IAAI,KAAK,CAAE;AAChC,oBAAiB,IAAI,KAAK;AAC1B,gBAAa,KAAK;IAAE;IAAM;IAAS;IAAW,CAAC;;GAE/C;AAEF,QAAO;EAAE;EAAe;EAAc;;;;;;;AAQvC,SAAS,mBAAmB,SAAkB,YAAiC;CAC9E,MAAM,wBAAQ,IAAI,KAAa;CAC/B,MAAM,OAAO,QAAQ;AACrB,KAAI,CAAC,KAAM,QAAO;AAClB,MAAK,MAAM,QAAQ,MAAM;AACxB,MAAI,KAAK,SAAS,oBAAqB;AACvC,MAAK,KAAK,eAAsC,OAAQ;EACxD,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,UAAU,OAAO,UAAU,cAAe;EAC/C,MAAM,aAAa,KAAK;AACxB,MAAI,CAAC,WAAY;AACjB,OAAK,MAAM,QAAQ,YAAY;AAC9B,OAAI,KAAK,SAAS,kBAAmB;AACrC,OAAK,KAAK,eAAsC,OAAQ;GACxD,MAAM,WAAW,KAAK;AACtB,OAAI,CAAC,SAAU;AAWf,QAPC,SAAS,SAAS,eACd,SAAS,OACV,SAAS,SAAS,YACjB,OAAO,SAAS,UAAU,WACzB,SAAS,QACT,KAAA,IACD,KAAA,OACgB,WAAY;GACjC,MAAM,QAAQ,KAAK;AACnB,OAAI,CAAC,SAAS,MAAM,SAAS,aAAc;AAC3C,SAAM,IAAI,MAAM,KAAe;;;AAGjC,QAAO;;;;;;AAOR,SAAS,qBAAqB,MAA0C;AACvE,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,KAAK,SAAS,UAAW,QAAO;AACpC,KAAI,OAAO,KAAK,UAAU,SAAU,QAAO;AAC3C,QAAO,KAAK;;;;;;;AAQb,SAAS,iBAAiB,MAA4C;AACrE,KAAI,CAAC,QAAQ,KAAK,SAAS,mBAAoB,QAAO;CACtD,MAAM,aAAa,KAAK;AACxB,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,SAAmB,EAAE;CAC3B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,QAAQ,YAAY;AAC9B,MAAI,KAAK,SAAS,WAAY;EAC9B,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,OAAO,IAAI,SAAS,aAAa,OAAO,IAAI,UAAU,SAC1D;AACD,MAAI,KAAK,IAAI,IAAI,MAAM,CAAE;AACzB,OAAK,IAAI,IAAI,MAAM;AACnB,SAAO,KAAK,IAAI,MAAM;;AAEvB,QAAO;;;;;;AAOR,SAAS,KAAK,MAAe,OAAsC;AAClE,OAAM,KAAK;AACX,MAAK,MAAM,OAAO,OAAO,KAAK,KAAK,EAAE;AACpC,MAAI,QAAQ,SAAU;EACtB,MAAM,QAAQ,KAAK;AACnB,MAAI,MAAM,QAAQ,MAAM;QAClB,MAAM,QAAQ,MAClB,KAAI,QAAQ,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,SAC5D,MAAK,MAAiB,MAAM;aAI9B,SACA,OAAO,UAAU,YACjB,OAAQ,MAA6B,SAAS,SAE9C,MAAK,OAAkB,MAAM;;;;;;;;;;AC9LhC,MAAa,iBAAuD,IAAI,IAAI;CAC3E,CACC,UACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,qBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,aACA;EACC,MAAM;EACN,SAAS;EACT,WACC;EACD,CACD;CACD,CACC,8BACA;EACC,MAAM;EACN,SAAS;EACT,WACC;EACD,CACD;CACD,CACC,mBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,gBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,kBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,iBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,eACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,wBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,YACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,cACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,gBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,oBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,2BACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,gCACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,gBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,qBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,qBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,aACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,mBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,UACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,kBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,mBACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CACC,8BACA;EACC,MAAM;EACN,SAAS;EACT,WAAW;EACX,CACD;CACD,CAAC;;;AC9MF,MAAM,kBAAuC,IAAI,IAAI;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;;;;;;;;;;AAWF,eAAsB,YACrB,MACA,YACA,SAA4B,EAAE,EACV;CACpB,MAAM,UAAU,IAAI,IAAY,CAAC,GAAG,iBAAiB,GAAG,OAAO,CAAC;CAChE,MAAM,OAAO,IAAI,IAAI,WAAW;CAChC,MAAM,UAAoB,EAAE;CAE5B,eAAe,KAAK,KAA4B;EAC/C,IAAI;AACJ,MAAI;AACH,aAAW,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;WAC9C,KAAK;GACb,MAAM,OAAQ,IAA8B;AAC5C,OAAI,SAAS,YAAY,SAAS,UAAW;AAC7C,SAAM;;AAEP,OAAK,MAAM,SAAS,SAAS;AAC5B,OAAI,QAAQ,IAAI,MAAM,KAAK,CAAE;GAC7B,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,OAAI,MAAM,aAAa,CACtB,OAAM,KAAK,KAAK;YACN,MAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,MAAM,KAAK,CAAC,CACzD,SAAQ,KAAK,KAAK;;;AAKrB,OAAM,KAAK,KAAK;AAChB,SAAQ,MAAM;AACd,QAAO;;;;;;;;;ACpBR,MAAM,sBAAsB;;;;;;;AAQ5B,MAAM,mBAAmB;;;;;;;;;AAUzB,MAAM,2BAA2B;;;;;;;;;;;;;AAcjC,SAAgB,YAAY,UAA8B,EAAE,EAAU;CACrE,MAAM,YAAY,QAAQ,UAAU;CACpC,MAAM,aAAa,QAAQ,cAAc,CAAC,OAAO,OAAO;CACxD,MAAM,SAAS,QAAQ,UAAU,EAAE;CACnC,MAAM,oBAAoB,QAAQ,cAAc,kBAAkB;CAClE,IAAI;CACJ,IAAI;CACJ,IAAI,UAGA;EAAE,eAAe,EAAE;EAAE,cAAc,EAAE;EAAE;CAE3C,eAAe,sBACd,MAC6B;EAC7B,IAAI;AACJ,MAAI;AACH,SAAM,MAAM,SAAS,QAAQ,MAAM,eAAe,EAAE,OAAO;UACpD;AACP,UAAO,EAAE;;EAEV,IAAI;AAIJ,MAAI;AACH,SAAM,KAAK,MAAM,IAAI;UACd;AACP,UAAO,EAAE;;EAEV,MAAM,UAAU;GACf,GAAG,IAAI;GACP,GAAG,IAAI;GACP;EACD,MAAM,UAA6B,EAAE;EACrC,MAAM,4BAAY,IAAI,KAAa;AACnC,OAAK,MAAM,WAAW,OAAO,KAAK,QAAQ,EAAE;GAC3C,MAAM,QAAQ,eAAe,IAAI,QAAQ;AACzC,OAAI,SAAS,CAAC,UAAU,IAAI,MAAM,KAAK,EAAE;AACxC,cAAU,IAAI,MAAM,KAAK;AACzB,YAAQ,KAAK,MAAM;;;AAGrB,SAAO;;CAGR,eAAe,eAAwC;EACtD,MAAM,QAAQ,MAAM,YAAY,gBAAgB,YAAY,OAAO;EACnE,MAAM,aAAuC,EAAE;EAC/C,MAAM,gBAAmC,EAAE;EAC3C,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,QAAQ,OAAO;GACzB,IAAI;AACJ,OAAI;AACH,WAAO,MAAM,SAAS,MAAM,OAAO;WAC5B;AACP;;GAED,MAAM,YAAY,gBAAgB,MAAM,KAAK;AAC7C,QAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QACvC,UAAU,cACV,EAAE;IACF,MAAM,WAAW,WAAW,aAAa,EAAE;IAC3C,MAAM,OAAO,IAAI,IAAI,SAAS;AAC9B,SAAK,MAAM,SAAS,OACnB,KAAI,CAAC,KAAK,IAAI,MAAM,EAAE;AACrB,cAAS,KAAK,MAAM;AACpB,UAAK,IAAI,MAAM;;AAGjB,eAAW,YAAY;;AAExB,QAAK,MAAM,SAAS,UAAU,aAC7B,KAAI,CAAC,YAAY,IAAI,MAAM,KAAK,EAAE;AACjC,gBAAY,IAAI,MAAM,KAAK;AAC3B,kBAAc,KAAK,MAAM;;;AAI5B,MAAI,mBAAmB;GACtB,MAAM,aAAa,MAAM,sBAAsB,aAAa;AAC5D,QAAK,MAAM,SAAS,WACnB,KAAI,CAAC,YAAY,IAAI,MAAM,KAAK,EAAE;AACjC,gBAAY,IAAI,MAAM,KAAK;AAC3B,kBAAc,KAAK,MAAM;;;AAI5B,SAAO;GAAE,eAAe;GAAY,cAAc;GAAe;;;;;;;CAQlE,SAAS,gBAAgB,MAAuB;EAC/C,MAAM,MAAM,SAAS,gBAAgB,KAAK;AAC1C,MAAI,CAAC,OAAO,IAAI,WAAW,KAAK,CAAE,QAAO;AACzC,SAAO,WAAW,MAAM,QAAQ,KAAK,SAAS,IAAI,CAAC;;;;;;;;;CAUpD,eAAe,iBAAiB,QAAsC;EACrE,MAAM,OAAO,MAAM,cAAc;AACjC,MAAI,KAAK,UAAU,KAAK,KAAK,KAAK,UAAU,QAAQ,CAAE;AACtD,YAAU;EACV,MAAM,MAAM,OAAO,YAAY,cAAc,oBAAoB;AACjE,MAAI,IAAK,QAAO,YAAY,iBAAiB,IAAI;AACjD,SAAO,GAAG,KAAK,EAAE,MAAM,eAAe,CAAC;;AAGxC,QAAO;EACN,MAAM;EACN,SAAS;EACT,eAAe,QAAQ;AACtB,kBAAe,OAAO;AACtB,oBAAiB,QAAQ,OAAO,MAAM,UAAU;;EAEjD,MAAM,aAAa;AAClB,aAAU,MAAM,cAAc;;EAE/B,gBAAgB,QAAQ;AAKvB,UAAO,QAAQ,IAAI,eAAe;GAElC,MAAM,UAAU,OAAO,SAAgC;AACtD,QAAI,CAAC,gBAAgB,KAAK,CAAE;AAG5B,QAAI;AACH,WAAM,iBAAiB,OAAO;aACtB,OAAO;AACf,YAAO,OAAO,OAAO,MACpB,4CAA4C,QAC5C;;;AAIH,UAAO,QAAQ,GAAG,UAAU,QAAQ;AACpC,UAAO,QAAQ,GAAG,OAAO,QAAQ;AACjC,UAAO,QAAQ,GAAG,UAAU,QAAQ;;EAErC,MAAM,UAAU,QAAQ,UAAU,gBAAgB;AACjD,OAAI,CAAC,YAAY,CAAC,yBAAyB,KAAK,OAAO,CAAE,QAAO;GAGhE,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,UAAU;IACrD,GAAG;IACH,UAAU;IACV,CAAC;AACF,OAAI,CAAC,SAAU,QAAO;AACtB,OAAI,CAAC,iBAAiB,KAAK,SAAS,GAAG,CAAE,QAAO;AAChD,UAAO;;EAER,KAAK,IAAI;AACR,OAAI,OAAO,oBAAqB,QAAO;AACvC,UACC,gCAAgC,KAAK,UACpC,QAAQ,cACR,CAAC,iCAC6B,KAAK,UAAU,QAAQ,aAAa,CAAC;;EAGtE"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@openpolicy/vite-auto-collect",
-	"version": "0.0.18",
+	"version": "0.0.19",
 	"type": "module",
 	"description": "Vite plugin that scans source files for @openpolicy/sdk collecting() calls and populates autoCollected() at build time",
 	"license": "GPL-3.0-only",